https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:45:04.888580+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:6368 ALSA-2023:6368 — Moderate: qemu-kvm security, bug fix, and enhancement update 2026-10-04T05:45:05.008055+00:00

Affected: AlmaLinux:9: qemu-guest-agent, AlmaLinux:9: qemu-img, AlmaLinux:9: qemu-kvm, AlmaLinux:9: qemu-kvm-audio-pa, AlmaLinux:9: qemu-kvm-block-blkio, AlmaLinux:9: qemu-kvm-block-curl, AlmaLinux:9: qemu-kvm-block-rbd, AlmaLinux:9: qemu-kvm-common, AlmaLinux:9: qemu-kvm-core, AlmaLinux:9: qemu-kvm-device-display-virtio-gpu and 10 more

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM.

The following packages have been upgraded to a later upstream version: qemu-kvm (8.0.0). (BZ#2180898)

Security Fix(es):

* QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) (CVE-2023-2680)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-04420 bdu:2024-04420 2026-10-04T05:45:05.008147+00:00 bdu:2024-04420 https://cve.radiocsirt.org/vuln/euvd-2026-216354 EUVD-2026-216354 2026-10-04T05:45:05.008166+00:00 EUVD-2026-216354 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2680 fkie_cve-2023-2680 2026-10-04T05:45:05.008180+00:00

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

 https://cve.radiocsirt.org/vuln/ghsa-69cm-qhp7-ch23 GHSA-69cm-qhp7-ch23 2026-10-04T05:45:05.008202+00:00

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750.

 https://cve.radiocsirt.org/vuln/gsd-2023-2680 gsd-2023-2680 2026-10-04T05:45:05.008217+00:00 gsd-2023-2680 https://cve.radiocsirt.org/vuln/rhsa-2023:6368 RHSA-2023:6368 — Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update 2026-10-04T05:45:05.008228+00:00

QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750)

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2350 WID-SEC-W-2023-2350 — QEMU: Schwachstelle ermöglicht Denial of Service 2026-10-04T05:45:05.008245+00:00

Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.